Hello everyone,
can you give me some tips on where I can get in noscript source code the script parse in HTML page? Just want to review it but can just find it.
Thanks in advance,
have a nice day
Script parser
- Giorgio Maone
- Site Admin
- Posts: 9454
- Joined: Wed Mar 18, 2009 11:22 pm
- Location: Palermo - Italy
- Contact:
Re: Script parser
If you mean for script blocking purposes, NoScript does NOT parse the HTML source (e.g. for stripping out <script> tags or event attributes) but relies on CSP to block content loading and execution.
A NoScript component which actually involves some amount of HTML scanning instead, mostly via regular expressions, and on Firefox only, is the XSS injection checker.
A NoScript component which actually involves some amount of HTML scanning instead, mostly via regular expressions, and on Firefox only, is the XSS injection checker.
Mozilla/5.0 (X11; Linux x86_64; rv:101.0) Gecko/20100101 Firefox/101.0